Threat Intelligence Tarot
wands · 7
Ukraine (government-coordinated volunteer collective)
★★★★★
risk 2/5
✦ The Volunteer Corps ✦
IT Army of Ukraine
UA IT Army · Ukrainian cyber volunteers
Russian banksRussian government websitesRussian logisticsRussian propaganda outlets
Active since February 2022 · Russian economic disruption, Psychological operations, War-time cyber resistance
On the day Russia invaded, Ukraine's Digital Minister posted a Telegram message and 200,000 people volunteered. The Volunteer Corps is something new: a state-coordinated civilian cyber army, given targeting lists by government and turned loose. Conflict has been digitized from below.
Tactics & Techniques
RCN
RDV
INI
EXC
PRS
PRV
EVA
CRD
DSC
LAT
COL
C2
EXF
IMP
Notable Operations
- ◆Russian banking system DDoS campaigns (2022–present)
- ◆Telegram channel with 200,000+ volunteer members
- ◆Coordinated attacks on Russian logistics and supply chains
- ◆Website defacement of Russian government and media properties
Defenses
- ▸DDoS mitigation and Anycast infrastructure for critical servicesNIST CSF: PR.DS ↗
- ▸Redundant hosting and CDN for government web propertiesNIST CSF: PR.DS ↗
- ▸Traffic monitoring for volumetric attack signaturesCIS Control 13 ↗
Reversed: Their Weakness
The IT Army's volunteer-heavy composition creates significant operational security risks - unvetted participants, inconsistent tradecraft, and potential for escalation beyond sanctioned targets make it a blunt instrument in a conflict that also demands precision.
Share this adversary profile
swipe to browse
Related Adversaries
Data sourced from MITRE ATT&CK. For educational purposes.